Model-based active fault-tolerant control for a cryogenic combustion test bench